Intelligent attestation of traffic using a routing engine
The present application describes providing an attestation level to a received communication. The attestation level may be used to communicate a level of security to a network or a called party that receives the communication. The attestation level associated with the communication may indicate to a destination network and/or recipient that the phone number associated with the communication is secure and/or the telephone number has not been spoofed.
1. A method, comprising:
receiving, by an enterprise routing engine, a telephone communication addressed to a destination network;
determining, by the enterprise routing engine, based at least in part on a property associated with the telephone communication, whether the telephone communication is associated with a particular originating domain;
based on determining that the telephone communication is associated with the particular originating domain, determining, by the enterprise routing engine, an attestation level for which the telephone communication is eligible, the attestation level including at least one of: full attestation, partial attestation, and gateway attestation;
associating, by the enterprise routing engine, a tag with the telephone communication, wherein the tag indicates the attestation level;
providing, by the enterprise routing engine, the telephone communication and the tag to a core routing engine;
determining, by the core routing engine and based at least in part on the tag, to route the telephone communication to a signing server;
providing, by the core routing engine, an attestation at the attestation level; and
routing, by the core routing engine, the telephone communication with the attestation to the destination network.
2. The method of claim 1 , wherein the attestation is provided by a signing server.
3. The method of claim 1 , further comprising determining, based at least in part on the tag, whether to provide the attestation at the determined attestation level.
4. The method of claim 2 , wherein the attestation and the communication are routed to an egress server by the signing server.
5. The method of claim 2 , wherein the attestation and the communication are routed by the signing server to the routing engine, and the routing engine routes the communication with the attestation to the destination network.
6. The method of claim 1 , wherein determining the attestation level comprises comparing the particular originating domain to a list of domains that have subscribed for an attestation service.
7. The method of claim 1 , wherein the routing engine routes the communication to a particular interface of a plurality of interfaces of the signing server based on the attestation level.